Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: zAHjxSU2iWhfLyzRd28tCr6603Kp1Dz3eTHYe9ANCMo=
Subject key identifier: 25:FA:BA:76:84:D8:47:26:91:5A:F2:67:93:89:FA:B9:96:E1:D5:A4
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 01A15FD6244C3F3B7B47B7BE4092A354B7A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 0E78
Signing time: Wed 21 Oct 2026 19:00:31 +0000
Manifest this update: Wed 21 Oct 2026 19:00:31 +0000
Manifest next update: Thu 22 Oct 2026 19:00:31 +0000
Files and hashes: 1: 1-3zUelmkTSgTStRjVWxjNNQBiM4.roa (hash: HmKxIUYZnOTiOcoe1j/2oHqq1Af7hqG1JDavmuwUScA=)
2: 2W_yiasSlHxMzGvCseIvYg5Ozd4.roa (hash: KtoflOTIZ2ZK45JBs/qFK0YOESeh/OnZjIbaMrPqgdU=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: 4P8YFMLknkSlUmjLNBvBPLBib/yty0foS7DroRwHOW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:d6:24:4c:3f:3b:7b:47:b7:be:40:92:a3:54:b7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Oct 21 19:00:31 2026 GMT
Not After : Oct 22 19:00:31 2026 GMT
Subject: CN=25faba7684d84726915af2679389fab996e1d5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:8f:55:ea:7f:87:c3:27:77:1b:ea:cd:06:
29:c6:e6:3c:40:19:23:6d:58:71:c6:6f:5e:1d:7c:
48:36:6c:4b:39:e6:f3:50:c1:62:12:4d:a4:c4:d3:
d7:78:c9:79:d7:56:a0:1e:c8:c9:0e:10:88:82:94:
40:80:4f:db:b2:95:a0:95:70:af:58:c7:69:99:b1:
40:6a:22:ec:aa:06:4a:5a:de:45:3f:48:bb:33:45:
65:0a:9c:06:0f:8c:d1:27:df:2a:a5:57:fa:84:07:
91:e5:c3:cf:93:53:3b:fe:b2:11:98:42:86:bc:ff:
2d:c1:61:18:55:e5:c7:ba:83:09:5f:21:8a:d0:e8:
11:35:8b:99:69:a2:9f:a9:15:01:1d:5a:45:29:ed:
ed:d6:15:f2:3b:a6:0f:8e:02:de:10:dc:b4:97:73:
dc:e1:94:83:0f:83:74:a3:b3:2f:12:94:27:55:b1:
7d:f9:83:9a:64:20:49:1b:57:f4:c5:ae:c5:8b:47:
b7:54:d5:db:ac:75:ae:79:4a:0c:59:b9:f1:78:ad:
23:e7:0b:ff:d0:5d:86:27:bc:98:0e:41:10:6b:60:
b5:14:d3:5c:2b:72:17:30:42:11:96:16:36:54:ea:
de:5a:4c:85:bf:d0:b1:41:34:e9:f5:b2:5d:16:88:
c6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FA:BA:76:84:D8:47:26:91:5A:F2:67:93:89:FA:B9:96:E1:D5:A4
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e3:9f:2e:9a:62:e8:ac:4a:60:07:5d:b7:da:08:b9:54:71:
c1:15:95:1c:cf:cb:84:88:ec:c1:26:ac:33:cf:cf:34:08:ff:
dc:3e:07:53:c7:e0:77:1d:ef:fb:cd:da:7a:81:f2:5a:bd:07:
03:e0:f5:1d:e4:5e:c5:92:67:34:84:fb:77:34:d3:53:8c:c4:
c3:85:1a:81:68:49:25:0c:3b:75:a1:0e:ce:e6:4d:a2:09:89:
80:33:86:29:fa:59:c3:33:19:aa:bc:57:ac:91:fa:e0:4c:11:
aa:38:da:c8:49:bb:4b:8f:d9:20:ec:b7:2f:73:44:e4:9f:0f:
a4:bf:68:45:fc:cd:f4:e9:0e:a0:88:7c:ba:41:31:00:25:e1:
1e:5b:7d:f6:ae:65:06:35:07:3e:59:24:92:a4:c8:5b:0a:0f:
4c:a9:b8:17:5a:54:b9:5e:c3:2c:b7:3c:70:9f:1d:37:80:41:
84:5f:6c:12:a0:91:78:ee:a5:f7:cd:de:a2:4b:6e:b5:bd:03:
c2:09:b2:c1:85:c6:8b:f7:83:ae:f1:56:af:5a:82:67:2a:2e:
a4:89:6b:76:0b:80:6b:ce:53:68:8b:b0:a5:cf:90:f1:16:88:
53:04:62:72:3a:a4:0c:9a:fb:ef:63:6e:e4:fd:40:4b:c9:e1:
4a:13:84:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFf1iRMPzt7R7e+QJKjVLegMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmFhMzJlYmVjOWNlYTFjOTNjNGJkNTVmODVlZjdlMGE1
ZDRmOTIwHhcNMjYxMDIxMTkwMDMxWhcNMjYxMDIyMTkwMDMxWjAzMTEwLwYDVQQD
EygyNWZhYmE3Njg0ZDg0NzI2OTE1YWYyNjc5Mzg5ZmFiOTk2ZTFkNWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH6PVep/h8MndxvqzQYpxuY8QBkj
bVhxxm9eHXxINmxLOebzUMFiEk2kxNPXeMl511agHsjJDhCIgpRAgE/bspWglXCv
WMdpmbFAaiLsqgZKWt5FP0i7M0VlCpwGD4zRJ98qpVf6hAeR5cPPk1M7/rIRmEKG
vP8twWEYVeXHuoMJXyGK0OgRNYuZaaKfqRUBHVpFKe3t1hXyO6YPjgLeENy0l3Pc
4ZSDD4N0o7MvEpQnVbF9+YOaZCBJG1f0xa7Fi0e3VNXbrHWueUoMWbnxeK0j5wv/
0F2GJ7yYDkEQa2C1FNNcK3IXMEIRlhY2VOreWkyFv9CxQTTp9bJdFojG7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCX6unaE2EcmkVryZ5OJ+rmW4dWkMB8GA1UdIwQY
MBaAFJYqoy6+yc6hyTxL1V+F734KXU+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZTM4ZWEtYzlmYS00MDEzLTlmZDMt
ODU4YzZmODgyOWViLzEvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8yZTM4ZWEtYzlmYS00MDEzLTlmZDMtODU4YzZmODgyOWVi
LzEvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+OfLppi
6KxKYAddt9oIuVRxwRWVHM/LhIjswSasM8/PNAj/3D4HU8fgdx3v+83aeoHyWr0H
A+D1HeRexZJnNIT7dzTTU4zEw4UagWhJJQw7daEOzuZNogmJgDOGKfpZwzMZqrxX
rJH64EwRqjjayEm7S4/ZIOy3L3NE5J8PpL9oRfzN9OkOoIh8ukExACXhHlt99q5l
BjUHPlkkkqTIWwoPTKm4F1pUuV7DLLc8cJ8dN4BBhF9sEqCReO6l983eoktutb0D
wgmywYXGi/eDrvFWr1qCZyoupIlrdguAa85TaIuwpc+Q8RaIUwRicjqkDJr772Nu
5P1AS8nhShOEGA==
-----END CERTIFICATE-----
Generated at Thu Oct 22 03:22:52 2026 by rpki-client